Veracode is an independent security firm that has determined that that the Android application of Pandora appears to be sending out the birth date, location, Android ID, GPS location and gender of its users to ad companies. A Federal Grand Jury is also involved in the investigation of apps that send out personal information to ad companies including Pandora. [Veracode via Engadget]